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Art Unit: 2166 

DETAILED ACTION 

1. This office action is in response to application 10691865 filed on 10/25/2002. 
Claims 1-20 are pending. 

Claim Objections 

Claim 14 is objected to because of the following informalities: "creating a local 
database of storing information". Examiner recommends and will assume for the 
purposes of this examination that the claim was meant to read "creating a local 
database for storing information. Appropriate correction is required. 

Claim Rejections - 35 USC § 112 

The following is a quotation of the second paragraph of 35 U.S.C. 112: 

The specification shall conclude with one or more claims particularly pointing out and distinctly 
claiming the subject matter which the applicant regards as his invention. 

Regarding claim 11, the phrase "such as" renders the claim indefinite because it 

is unclear whether the limitations following the phrase are part of the claimed invention. 

See MPEP § 2173.05(d), Examiner will assume for the purposes of this office action 

that the phrase "such as" is defined like an or statement. 

Claim Rejections - 35 USC § 103 
The following is a quotation of 35 U.S.C. 103(a) which forms the basis for all 
obviousness rejections set forth in this Office action: 



Application/Control Number: 10/691.865 



Page 3 



Art Unit: 2166 

(a) A patent may not be obtained though the invention Is not identically disclosed or described as set 
forth in section 102 of this title, if the differences between the subject matter sought to be patented and 
the prior art are such that the subject matter as a whole would have been obvious at the time the 
invention was made to a person having ordinary skill in the art to which said subject matter pertains. 
Patentability shall not be negatived by the manner in which the invention was made. 

The factual inquiries set forth in Graham v. John Deere Co., 383 U.S. 1 , 148 

USPQ 459 (1966). that are applied for establishing a background for determining 

obviousness under 35 U.S.C. 103(a) are summarized as follows: 

1 . Determining the scope and contents of the prior art, 

2. Ascertaining the differences between the prior art and the claims at issue. 

3. Resolving the level of ordinary skill in the pertinent art. 

4. Considering objective evidence present in the application indicating 
obviousness or nonobviousness. 

Claims 1-20 are rejected under 35 U.S.C. 103(a) as being unpatentable over US 

5991709 (hereinafter Schoen) in view of US 20040059736 (hereinafter Will). 



As for claim 1: Schoen discloses: defining critical information (See column 4 lines 
50-54). Generating a policy containing critical information definition (See column 4 line 
51 note: the rules are policy). Distributing this critical information policy to each 
computer that has critical information (See column 5 lines 53-55, 66-67 note: each 
subsystem can be a separate computer and in that case the rules are distributed). 
Assessing the criticality of information based on the criticality definition in step c above 
(See column 5 lines 45-51). 
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While Schoen does not differ substantially from the claimed invention the 
disclosure of generating the inventory of information on each computer, generating a 
report of the assessment results, collection of assessment results from all computers, 
generating a report of assessment results is not necessarily explicit. Will however does 
disclose: generating the inventory of information on each computer (See table 1), 
generating a report of the assessment results (See paragraph 0064), collection of 
assessment results from all computers, generating a report of assessment results (See 
paragraph 0066 subroutine processing is other computer processing as well). It would 
have been obvious to an artisan of ordinary skill in the pertinent art to have 
incorporated, the teachings of Will into the system of Schoen. The modification would 
have been obvious because specialized systems require customized document 
extraction, and a general method of defining critical information is both practial and not 
very time consuming in terms of development (See Will paragraph 0004). 

As for claim 2, the rejection of claim 1 is incorporated, and further Will discloses: 
where the critical information is defined by signatures (See paragraph 0039). 

As for claim 3, the rejection of claim 2 is incorporated, and further Will discloses: 
where signatures include tag signatures and content signatures (See paragraph 0039), 
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As for claim 4, the rejection of claim 3 is incorporated, and further Will discloses: 
where tag signatures include markers on the data files such as file type, password 
protection, encryption (See will paragraph 0039 note C). 

As for claim 5, the rejection of claim 3 is incorporated, and further Will discloses: 
where content signatures include strings within an information document and include 
generic signatures as well as functional signatures (See will paragraph 0039 note E 
"predefined strings"). 

As for claim 6, the rejection of claim 5 is incorporated, and further Will discloses: 
where generic content signatures apply across the organization and functional content 
signatures apply to specific functional groupings (See Will paragraph 0039 note g as 
functional and F as organizational). 

As for claim 7, the rejection of claim 1 is incorporated, and further Will discloses: 
where information inventory includes collecting information about the computing device, 
attributes of the computing device, a list of data files on the computing device, and 
attributes on the data file (See paragraphs 0064, 0065, 0066 and note that a matrix will 
be done for each computer). 
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As for claim 8, the rejection of claim 7 is incorporated, and further Will discloses: 
where attributes on the data file include size, creation time, usage time, encryption 
information, password information (See will paragraph 0039 note C). 

As for claim 9, the rejection of claim 1 is incorporated, and further Will discloses 
where the critical information may be identified by color coding the criticality level (See 
paragraph 0139). 

As for claim 10, the rejection of claim 1 is incorporated, and further Will discloses: 
where assessment of critical information is done by identifying signature match between 
signature book generated by definition of critical information and the signature of 
information documents on the computing device being assessed (See paragraph 0039 
note: B). 

As for claim 1 1 , the rejection of claim 10 is incorporated, and further Will 
discloses: where the signature comparison could be accomplished by methods such as 
pattern matching, neural networks, weighted matches (See paragraph 0069). 

As for claim 12, the rejection of claim 10 is incorporated, and further Will 
discloses: where signature matching could be accomplished using existing applications 
resident on the computing device (See paragraph 0040). 
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As for claim 13, the rejection of claim 12 is incorporated, and further Will 
discloses: where an instance of an existing application is the indexing service popularly 
available on Microsoft windows operating system devices (See paragraph 0040 note the 
windows products are all generic application components). 

As for claim 14, the rejection of claim 1 is incorporated, and further Will discloses: 
where generation of assessment reports include creating a local database for storing 
information about each document assessed (See paragraph 0052 ). 

As for claim 15, the rejection of claim 14 is incorporated, and further Will 
discloses: where the assessment report includes average criticality and distribution of 
critical information (See paragraph 0058). 

As for claim 16, the rejection of claim 1 is incorporated, and further Will discloses: 
where results from assessment of computing devices can be collected and correlated to 
generate aggregated criticality reports (See paragraph 0043). 

Claim 17 is an apparatus claim corresponding to method claim 1, and is thus 
rejected for the same reasoning as set forth in the rejection of claim 1 . 
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As for claim 18, the rejection of claim 17 is incorporated, and further Will 
discloses: where the centralized software and distributed software communicate 
messages over a network (See paragraph 0043). 

As for claim 19, the rejection of claim 18 is Incorporated, and further Will 
discloses: where the network could be an Ethernet, wireless, or dialup network and the 
messages may be encrypted (See paragraph 0043). 

As for claim 20, the rejection of claim 17 is incorporated, and further Will 
discloses: where the criticality definition can be sent to the distributed software on a on- 
demand or periodic basis and where the results of assessment can be sent to the 
centralized manager on an on-demand or periodic basis (See paragraph 0043). 
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Information 



Any inquiry concerning this communication or earlier communications from the 
examiner should be directed to Leon J. Harper whose telephone number is 571-272- 
0759. The examiner can normally be reached on 7:30AM - 4:00Pm. 

If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, Hosain T. Alam can be reached on 571-272-3978. The fax phone number 
for the organization where this application or proceeding is assigned is 571-273-8300. 

Information regarding the status of an application may be obtained from the 
Patent Application Information Retrieval (PAIR) system. Status information for 
published applications may be obtained from either Private PAIR or Public PAIR. 
Status information for unpublished applications is available through Private PAIR only. 
For more information about the PAIR system, see http://pair-direct.uspto.gov. Should 
you have questions on access to the Private PAIR system, contact the Electronic 
Business Center (EBC) at 866-217-9197 (toll-free). If you would like assistance from a 
USPTO Customer Service Representative or access to the automated information 
system, call 800-786-9199 (IN USA OR CANADA) or 571-272-1000. 



LJH 

Leon J. Harper 
June 11 2006 




